Description
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.ruoyi:ruoyi | <= 4.6 | — | GHSA-fg29-37px-c7wm |
Critical · 9.8
CVE-2023-49371
EUVD-2023-3196GHSA-fg29-37px-c7wm
RuoYi vulnerable to SQL injection vulnerability
Published Dec 1, 2023 · Updated Aug 2, 2024 · Assigned by mitre